7103c278907a01d043f89a913c1abfbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7103c278907a01d043f89a913c1abfbb_JaffaCakes118
Size

55KB
MD5

7103c278907a01d043f89a913c1abfbb
SHA1

3f836911510adb1bf6bd03dc091b206ec671b326
SHA256

eda495a24b82e5e8277c20f8a3906b08ceff334217ea20b774a4b66ee7dc066a
SHA512

5fcf0dd05d2acb4a5f8d3761e06a3cc6a6451fc222a7c3d0a63498d8bd8afa6b760cdc984bac14f48efa8d9d503f7750463982ead8bc07e7ac356944a2c70e06
SSDEEP

1536:yd3L3PJCijehzIqFj6dn3vov1CLnE0FmvI9yV2wrV28v6:uj4zIqF+n/oArE00I3sV7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7103c278907a01d043f89a913c1abfbb_JaffaCakes118

Files

7103c278907a01d043f89a913c1abfbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c8aff7b460416e2897bf166a54fcd3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FoldStringA
EnumLanguageGroupLocalesW
GetVDMCurrentDirectories
GetFileSizeEx
SetProcessAffinityMask
QueryPerformanceCounter
SystemTimeToFileTime
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE